<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Attack Relevancy Rating in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/attack-relevancy-rating/m-p/1306713#M68766</link>
    <description>&lt;P&gt;What is the internal value of the Attack Relevancy Rating for the system with relevance=not-relevant. I do not see any difference for the system with relevance=unknown. In the attachment you will find the example of an attack? It is OK or not?&lt;/P&gt;&lt;P&gt;Looking forward ho hearing from you &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt; &lt;/P&gt;&lt;P&gt;&lt;/P&gt;</description>
    <pubDate>Sun, 10 Mar 2019 11:44:09 GMT</pubDate>
    <dc:creator>k.dmowski</dc:creator>
    <dc:date>2019-03-10T11:44:09Z</dc:date>
    <item>
      <title>Attack Relevancy Rating</title>
      <link>https://community.cisco.com/t5/network-security/attack-relevancy-rating/m-p/1306713#M68766</link>
      <description>&lt;P&gt;What is the internal value of the Attack Relevancy Rating for the system with relevance=not-relevant. I do not see any difference for the system with relevance=unknown. In the attachment you will find the example of an attack? It is OK or not?&lt;/P&gt;&lt;P&gt;Looking forward ho hearing from you &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt; &lt;/P&gt;&lt;P&gt;&lt;/P&gt;</description>
      <pubDate>Sun, 10 Mar 2019 11:44:09 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/attack-relevancy-rating/m-p/1306713#M68766</guid>
      <dc:creator>k.dmowski</dc:creator>
      <dc:date>2019-03-10T11:44:09Z</dc:date>
    </item>
    <item>
      <title>Re: Attack Relevancy Rating</title>
      <link>https://community.cisco.com/t5/network-security/attack-relevancy-rating/m-p/1306714#M68768</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;value for ARR is adjusted as below :&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;- Unknown relevance : no change &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;- Relevant : +10 &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;- Not-Relevant : -10 for promiscuous mode and no change for inline mode.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;From the above adjustments sensor is behaving as it is supposed to be in your case. Since the risk ratings are same for system with not-relevant and unknown OS, looks like your sensor is in inline mode.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 14 Aug 2009 12:34:21 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/attack-relevancy-rating/m-p/1306714#M68768</guid>
      <dc:creator>mkodali</dc:creator>
      <dc:date>2009-08-14T12:34:21Z</dc:date>
    </item>
    <item>
      <title>Re: Attack Relevancy Rating</title>
      <link>https://community.cisco.com/t5/network-security/attack-relevancy-rating/m-p/1306715#M68769</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;Thank you very much for your information&lt;/P&gt;&lt;P&gt;Best regards&lt;/P&gt;&lt;P&gt;Kazimierz&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 14 Aug 2009 13:04:25 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/attack-relevancy-rating/m-p/1306715#M68769</guid>
      <dc:creator>k.dmowski</dc:creator>
      <dc:date>2009-08-14T13:04:25Z</dc:date>
    </item>
  </channel>
</rss>

